https://www.cnet.com/news/apple-flaw-allows-macos-high-sierra-logins-without-passwords/

The username is the "root" of all problems for Apple's latest operating system.

It turns out you don't need a password to log in to a locked Apple device using MacOS High Sierra -- just the username "root."